CVE-2021-21935

A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger this vulnerability at ‘hostaltfilter2’ parameter. This can be done as any authenticated user or through cross-site request forgery...

CVE-2021-21935

CVE-2021-21935 maps to multiple SQL-injection vulnerabilities in Advantech R-SeeNet (device_list and related filters). Root cause is improper input handling (dynamic SQL via various filter parameters such as host_alt_filter2, desc_filter, prod_filter, etc.), allowing authenticated users (or CSRF ...

Advantech R-SeeNet

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Low attack complexity Vendor: Advantech Equipment: R-SeeNet Vulnerabilities: SQL Injection, Improper Privilege Management 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow authenticated users to perform a local privilege...